Privacy Policy
Version 1.2-2026-10-19 · 2026-10-19
FrançaisAt a glance
Épure helps you study using courses and actual answers. School content, conversations and learning observations are account-linked, not anonymous. We do not sell your documents or create hidden mastery scores. This notice covers the iPhone/iPad app, its services and the public website. Épure 2.0 and its commercial system remain under validation; a function described below may not be available in your version.
Controller and contact
The controller declared in the project records is Martin Legrand, an individual and voluntary publisher, distinct from Gabriel Legrand, the creator and owner of Épure. Contact details: /mentions-legales. For data questions or requests: knowli.support@gmail.com. No separate data protection officer is announced.
Account and access
Depending on your sign-in method, we process email, account ID, authentication and session information, optional name, language and selected academic context. Supabase provides authentication. Server-side checks enforce access; privileged service credentials are not supplied to clients. Never send your password or a sign-in code to support.
Sources, generated content and organisation
Features you use may process text, PDFs, images/photos, OCR-extracted text, structured courses, sheets, exercises, answers, corrections and annotations, Stanley conversations and associated documents. Some extraction and recognition happens locally; the necessary text is sent to the server for a requested AI operation. Originals may remain local or be stored privately depending on the workflow. Planning, homework, exam dates and availability are currently stored locally per account, without general cross-device synchronisation. Avoid unnecessary names, contact details, health information or other people's private data, and use only content you are entitled to provide.
Learning and personalisation
LearningEvidence observations record actual responses and assessments, assistance conditions and relevant context. The deterministic LearningPolicy uses them for Continue recommendations. Assisted success is not independent success. This is neither an official grade nor an admission or educational-placement decision with legal effects. Marking homework complete does not create learning evidence. You can challenge information and request correction without arbitrarily rewriting history.
AI and recipients
Supabase provides the database, authentication and private storage; the observed project region is eu-west-1 in Ireland. Groq and OpenAI may receive instructions, relevant source excerpts, messages and answers needed for requested generation, conversation or assessment. Anthropic is a configured fallback in the deployed router with a credential available: it may receive that context if used. Inspected metrics do not establish which recent calls succeeded with each provider. The legacy super-task route remains deployed and its logic can call Mistral AI or NVIDIA with configuration present. Current native generation paths use Core, not that legacy route. Older logs name these providers without establishing recent traffic: possible recipients are therefore distinct from observed successful calls. Apple handles distribution, purchases and authorised system services. OpenAI hosts this website through ChatGPT Sites, a separate role from its AI API. Support email uses the Gmail service selected for that address. Administrative access needed for support, security or rights requests must be limited to need.
AI choices, voice and Apple surfaces
The app asks permission for AI features and allows withdrawal in Profile → Privacy and data; withdrawal does not recall data already sent. Stanley Voice remains closed to the public in the current candidate. Its intended path requests on-device speech recognition and may send confirmed text to Stanley; this does not mean every audio feature is entirely local. iOS separately controls microphone, speech, photo and notification permissions. Widgets, extensions and system search use minimal local information, with account-change/sign-out cleanup mechanisms. The Share Extension requires confirmation before import; sharing a file does not authorise public publication.
Payments, EC and diagnostics
Apple processes payments; Épure does not receive your card number. Transaction references, products, entitlements and, once activated, quota and EC ledger entries verify access and prevent duplicate charges. Client credit balances are not authoritative. Technical events and metrics may describe errors, duration, model/provider and consumption; no advertising SDK or cross-app tracking was identified. No complete commercial-retention analytics system is established. Prepared privacy declarations also cover potential categories; they are not proof of active collection. The website community is read-only, with no new public contributions, votes or comments.
Purposes and legal bases
Processing necessary for accounts, requested functions, saving content and administering a contract relies on that contract or pre-contractual steps. Security, fraud prevention and responding to requests rely on legitimate interests subject to your rights and heightened protection for children. Applicable legal duties support retention they actually require. Consent applies to optional processing that requires it; an iOS permission alone is not a GDPR legal basis. Third-party or sensitive information should not be added to obtain an ordinary function.
Children
Épure also welcomes students aged 12, 13 and 14. France’s age-15 threshold is not a general access ban: it concerns consent-based processing within Article 8 GDPR and Article 45 of the French Data Protection Act. For such processing, the child and a holder of parental responsibility must both agree; an Apple purchase does not replace that agreement. Saved materials, reading and non-AI tools must not be blocked for this reason alone. The candidate prepared on 19 October provides an age band without a birth date, separate choices for AI creation, Stanley and answer assessment, followed by human review of parental authorization. These controls are not yet activated in production and no historical authorization is presumed. An email or checkbox does not prove parental responsibility. No automatic parent email or certified identity check is claimed. A parent can email knowli.support@gmail.com to learn about proportionate checks, refuse or withdraw permission; the child can also withdraw their own choice. A pending, refused or withdrawn request is not authorization. Withdrawal stops new processing in the relevant scope without automatically deleting the account or recalling data already transmitted. Do not send identity or school documents unsolicited. Other countries’ rules and contractual capacity remain separate; no school is presumed to authorize uploads.
Retention and deletion
No general automatic inactivity purge is established for accounts, courses, sources, conversations or observations; they remain while the account and purpose need them or until requested deletion. Older metrics have a30-day expiry field, but cleanup is write-triggered: older rows remain, so no guaranteed 30-day deletion is claimed. Community receipts also have bounded write-triggered cleanup. Private one-off database exports have been made for backup and restore testing; they are not public. No global automatic deletion deadline for all backups or providers is verified. Deletion therefore also requires examination of residual copies and retention necessary for a specific dispute or obligation, not indefinite retention by default. Support correspondence is reviewed for necessity when a request closes; no universal statutory period is invented. /account-deletion explains the actual flow and limits.
Transfers and security
The database's European region does not mean all processing stays in Europe. Providers and subprocessors may process data elsewhere, including the US. Applicable terms/DPAs describe transfer mechanisms, including standard contractual clauses where applicable; we do not certify unverified residency or retention settings. We promise neither end-to-end encryption nor universally absent human access, retention or use by every provider. Observed protections include HTTPS, session checks, ownership/RLS restrictions and account-scoped caches. They do not eliminate every risk. Sharing an export is your choice; identifiers and private paths are excluded from rendering by default, but imported text may itself contain personal data.
Your rights and references
You may request access, correction, erasure, restriction, portability where provided, object to legitimate-interest processing and withdraw consent. Email knowli.support@gmail.com; proportionate verification may be needed. GDPR generally requires a response within one month, with a reasoned extension where permitted. You may complain to CNIL, https://www.cnil.fr/ or your competent local authority. Provider information: https://supabase.com/legal/dpa ; https://console.groq.com/docs/your-data ; https://developers.openai.com/api/docs/guides/your-data ; https://www.anthropic.com/legal/privacy ; https://legal.mistral.ai/terms/privacy-policy ; https://www.nvidia.com/en-us/about-nvidia/privacy-policy/ ; https://www.apple.com/legal/privacy/ ; https://openai.com/policies/chatgpt-sites-data-processing-addendum/. Material changes will be dated and communicated through an appropriate channel; no nonexistent automatic notification mechanism is promised.